I have a few web applications that use Active Directory to authenticate. What I would like to be able to do is provide a simple web page that would allow users to update their AD password.

This wasn't a problem when the majority of the users had windows machines that connected to this AD server (and could ctrl-alt-del to change the password), but we are moving away from that and the AD server is mostly for web apps.

Is there a simple solution for this, or am I looking at the big LDAP managers?

I've installed ManageEngine's ADSelfService, and it works fine. It also has tons of other features, most of which I haven't yet played with, such as sending notification emails when passwords are about to expire.
–
GussJul 10 '11 at 10:16

A. The version of Internet Information Services (IIS) 6.0 that ships with Windows 2003 includes some Web-administration tools that are disabled by default. To enable the tools, perform the following steps:

Run Internet Information Server (IIS) Management.

Under the default website choose New->virtual Directory to start the wizard

This looks like a very useful feature, unfortunately it is no longer available with Windows 2008/IIS 7 - which is what I run. It looks like you can copy the old IISADMPWD from an IIS 6 install if you have it: blogs.msdn.com/b/asiatech/archive/2009/03/17/… , unfortunately I don't have an old IIS 6 lying about so I'll keep looking :-(
–
GussJul 10 '11 at 8:24

One more ready-made product that supports Active Directory web interface:
http://www.adaxes.com. Password update is one of many self-service tasks that can be implemented by the software. All you need to do is to delegate the necessary permissions via admin console and users would do their job using web browser. Thank you.